Stolen AI session tokens can bypass passwords and MFA.
In one 7 GB infostealer dump, Okta found 555 JWTs likely tied to AI authentication and 24 still-valid API keys for AI services.
In one 7 GB infostealer dump, Okta found 555 JWTs likely tied to AI authentication and 24 still-valid API keys for AI services.
Take your internet-exposed Alby Bitcoin wallet off the public internet first.
A critical flaw in Alby Hub v1.7.0–v1.18.5 could let attackers take over wallets that were reachable from the internet.
A critical flaw in Alby Hub v1.7.0–v1.18.5 could let attackers take over wallets that were reachable from the internet.
Google patched a new actively exploited Chrome V8 zero-day.
CVE-2026-87491 lets crafted HTML execute arbitrary code inside Chrome’s sandbox. Google has not said how it’s being weaponized or who is behind it.
CVE-2026-87491 lets crafted HTML execute arbitrary code inside Chrome’s sandbox. Google has not said how it’s being weaponized or who is behind it.
New CVE-2026-67401 vulnerability in cPanel lets mail-privileged hosting accounts execute code as root.
cPanel says every supported cPanel & WHM version is affected and has released fixed builds.
cPanel says every supported cPanel & WHM version is affected and has released fixed builds.
Malware linked to F5 BIG-IP APM break-ins hides a PHP web shell in memory while targeted scripts can remain clean on disk.
Sophos found the implant alters what PHP sees when Apache loads those files, helping explain why file checks can miss it.
Sophos found the implant alters what PHP sees when Apache loads those files, helping explain why file checks can miss it.
N-able says CVE-2026-86218 is being exploited in the wild. The CVSS 10.0 N-central flaw can enable pre-auth RCE.
CISA added it to KEV, while Huntress is probing a separate N-central compromise where the exploit used remains unconfirmed.
CISA added it to KEV, while Huntress is probing a separate N-central compromise where the exploit used remains unconfirmed.
Check Point patched two critical VPN certificate flaws, CVE-2026-85102 and CVE-2026-85103, that could allow unauthenticated RCE under specific, undisclosed conditions.
Both carry CVSS 9.8 scores.
Both carry CVSS 9.8 scores.
A Guardian-produced documentary at Venice reveals how Israel built AI systems to mass-generate low-ranking Hamas targets in Gaza.
Those targets were then bombed at home, at night, with full knowledge their families would die too.
The film, NAZA, features 24 Israeli military and intelligence insiders speaking anonymously.
Those targets were then bombed at home, at night, with full knowledge their families would die too.
The film, NAZA, features 24 Israeli military and intelligence insiders speaking anonymously.
The Iranian Revolutionary Guard sent a message to Israelis' phones saying:
"The last US radar system in the region has been destroyed. Your media and leaders are lying. Leave the country. Missiles are coming, and no shelter is safe."
"The last US radar system in the region has been destroyed. Your media and leaders are lying. Leave the country. Missiles are coming, and no shelter is safe."
Anthropic says it blocked five attempts to exploit AI models for potential bioweapons development
Artificial intelligence firm Anthropic revealed Thursday that it blocked five separate attempts to misuse its Claude models for activities that could potentially aid in the development of biological weapons.
Artificial intelligence firm Anthropic revealed Thursday that it blocked five separate attempts to misuse its Claude models for activities that could potentially aid in the development of biological weapons.
Cyber Dispatch™️
Anthropic says it blocked five attempts to exploit AI models for potential bioweapons development Artificial intelligence firm Anthropic revealed Thursday that it blocked five separate attempts to misuse its Claude models for activities that could potentially…
The incidents involved sensitive inquiries regarding chikungunya, avian influenza, and smallpox, including a case where a military-affiliated researcher sought assistance that raised concerns about generating deadlier viral variants.
The company's report also detailed attempts to bypass platform safeguards using fraudulent accounts and virtual private networks, alongside separate queries from Yemen concerning guided rocket development.
While Anthropic cautioned that detecting such capabilities does not prove malicious intent or a guarantee of success, the findings highlight mounting security risks as advanced AI systems lower technical barriers for specialized research.
The company's report also detailed attempts to bypass platform safeguards using fraudulent accounts and virtual private networks, alongside separate queries from Yemen concerning guided rocket development.
While Anthropic cautioned that detecting such capabilities does not prove malicious intent or a guarantee of success, the findings highlight mounting security risks as advanced AI systems lower technical barriers for specialized research.
Three threat clusters exploited Cisco FMC flaws to steal credentials, deploy Cyclops Blink, and push Qilin ransomware.
Both flaws are now in CISA’s KEV catalog. Federal agencies must patch CVE-2026-20079 by September 12.
Both flaws are now in CISA’s KEV catalog. Federal agencies must patch CVE-2026-20079 by September 12.
PaperCut has replaced its emergency patches for two actively exploited flaws with fully tested maintenance releases.
The flaws have been used to bypass authentication and execute arbitrary code. Versions 26.0.5, 25.0.13, and 24.1.10 include the fixes and added hardening.
The flaws have been used to bypass authentication and execute arbitrary code. Versions 26.0.5, 25.0.13, and 24.1.10 include the fixes and added hardening.
A crafted Sogou Input Method link led to GRAYRABBIT malware.
China-linked UNC3569 abused Sogou’s sgbiz: handler to open a malicious page in its built-in Chromium 80 browser, then exploited CVE-2021-38003 to run code with the logged-in user’s privileges.
China-linked UNC3569 abused Sogou’s sgbiz: handler to open a malicious page in its built-in Chromium 80 browser, then exploited CVE-2021-38003 to run code with the logged-in user’s privileges.
Attackers chained two JFrog Artifactory flaws to gain admin control and plant backdoors.
Only unupdated self-hosted servers were open to that chain. A separate critical auth bypass also drew 406,000 exploitation attempts in one day.
Only unupdated self-hosted servers were open to that chain. A separate critical auth bypass also drew 406,000 exploitation attempts in one day.
Kash Patel wanted FBI staff to run an influence campaign on X by replying to Epstein tweets with bureau stats.
He then asked his spokesman to reply to IfindRetards' post, saying it had gotten 277k responses.
His spokesman corrected him: it had 277k views and just 400 replies. He also warned that engaging "would look bad on you."
He then asked his spokesman to reply to IfindRetards' post, saying it had gotten 277k responses.
His spokesman corrected him: it had 277k views and just 400 replies. He also warned that engaging "would look bad on you."
Universal Music Group and ElevenLabs are building an AI platform that will let fans remix, mash up and reinterpret songs from UMG artists.
It's the first major-label deal for ElevenLabs, a company known for AI voice cloning. The companies also promise "personalized vocal experiences," without saying what that means
In May, UMG announced a similar AI covers and remix feature with Spotify.
It's the first major-label deal for ElevenLabs, a company known for AI voice cloning. The companies also promise "personalized vocal experiences," without saying what that means
In May, UMG announced a similar AI covers and remix feature with Spotify.
A new Android malware strain called Mantax Otax combines ransomware and spyware capabilities to encrypt files, steal sensitive data, and spam and harass victims.
Indonesian operators distribute the malware through malicious APKs hosted outside Google Play, targeting users with phishing and social engineering messages.
After installation, the malware requests permission to use the Accessibility service, which gives it extensive control over compromised devices.
Indonesian operators distribute the malware through malicious APKs hosted outside Google Play, targeting users with phishing and social engineering messages.
After installation, the malware requests permission to use the Accessibility service, which gives it extensive control over compromised devices.
They put tracking in your OS
They put tracking in your car
They put tracking in your watch
They put tracking in your phone
They put tracking in your comms
They put tracking in your browser
@CyberDispatch
They put tracking in your car
They put tracking in your watch
They put tracking in your phone
They put tracking in your comms
They put tracking in your browser
@CyberDispatch
A hacker broke into two companies, extorted them, and also collected bug bounty payouts of $2,000 and $5,000 from those same companies for reporting flaws.
Anthropic describes the operator as one of several suspected ShinyHunters affiliates using Claude across the full intrusion chain.
The same actor scraped bug bounty submissions as reconnaissance before going after specific targets.
Anthropic describes the operator as one of several suspected ShinyHunters affiliates using Claude across the full intrusion chain.
The same actor scraped bug bounty submissions as reconnaissance before going after specific targets.